Code: Select all
Link:WMIC shadowcopy delete /nointeractive
TeslaCrypt 3.1? New Ransomware Strain Removes ShadowCopies via WMI
Antelox
A forum for reverse engineering, OS internals and malware analysis
WMIC shadowcopy delete /nointeractive